Establish simple SSL client certificate auth.

The auth is based on matching e-mail addresses from valid (and trusted)
certificates onto system users.

Whenever user requests SSL cert auth, he is redirected to a dedicated
vhost where the HTTP server requests the certificate. Once there,
ssl-auth view checks the verification result and obtains e-mail
addresses from the certificate. The e-mail addresses are compared to
system users and if a match occurs, an authentication token is created.

The ssl-auth view redirects back to login, passing either the token, or
error message. If a valid token is passed, ExternalBackend is used to
sucessfully authenticate the user. Otherwise, the error message is
printed alike regular login messages.

1 files changed, 1 insertions, 0 deletions

diff --git a/setup.py b/setup.py
index a7ed559..ad09c20 100755
--- a/setup.py
+++ b/setup.py
@@ -39,6 +39,7 @@ setup(
         'django-ldapdb',
         'edpwd>=0.0.7',
         'passlib>=1.6.1',
+        'pyopenssl>=0.13',
         'python-ldap>=2.4.10',
         'python-openid>=2.2.5',
     ],